$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d876787e-6400-3e37-8c22-d71e15d2557f.roa File: d876787e-6400-3e37-8c22-d71e15d2557f.roa (raw, json) Hash identifier: O7TYbdTVUVUqLevnq+9++s0gGaKxxPgb5B3kuyefoG8= Subject key identifier: 5F:4F:46:46:9F:96:EA:71:A0:92:F1:8B:AC:C3:E8:EE:D5:DF:6C:89 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858496FAF20621C636862B40E3100 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d876787e-6400-3e37-8c22-d71e15d2557f.roa Signing time: Sun 06 Apr 2025 13:01:01 +0000 ROA not before: Sun 06 Apr 2025 13:01:01 +0000 ROA not after: Sat 05 Jul 2025 13:01:01 +0000 asID: 397233 IP address blocks: 156.154.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6f:af:20:62:1c:63:68:62:b4:0e:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 6 13:01:01 2025 GMT Not After : Jul 5 13:01:01 2025 GMT Subject: CN=861224bf-5016-4082-b967-d1176fa0c7d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d7:8e:7b:6e:ef:2c:a9:c0:69:84:44:42:f2: 63:2c:0e:6b:42:81:31:53:ae:9e:47:71:83:92:0c: 9d:6d:b8:cd:9c:09:2a:d7:9e:85:0c:63:85:bf:bf: b6:02:44:01:0c:19:9b:0a:37:f1:20:85:35:2b:2e: 5d:39:58:63:27:8a:0b:97:f6:d2:71:54:e7:b1:c5: 05:ce:66:df:d8:e3:26:05:b9:95:3a:2d:b0:ea:26: b2:ad:20:6f:f6:b6:02:cd:73:d5:ca:26:c6:27:a8: 4d:f8:18:f1:c5:b8:65:f6:04:6b:4d:f7:01:e2:87: ad:d9:42:f3:6e:9c:23:91:c4:18:16:53:2d:93:57: ce:ce:c3:c5:19:90:7d:2f:99:ad:11:ee:47:9c:18: fa:83:a5:a2:d6:00:c3:da:94:8c:e1:94:46:01:3e: 84:0d:29:f5:33:d3:ce:c7:61:96:0b:bf:2c:ae:61: 7d:49:0d:8e:76:0f:0d:a3:59:22:79:b3:39:79:38: 3e:df:8b:10:5f:7a:58:f8:bb:cd:83:f9:e4:01:58: be:80:6c:e7:f9:d1:1e:64:2e:4e:15:b6:c0:0b:1a: ce:ee:c9:11:9e:ac:2f:0f:93:58:3f:7c:fb:b8:38: 19:88:89:8d:37:90:aa:58:e0:60:c5:14:ce:a3:56: e0:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:4F:46:46:9F:96:EA:71:A0:92:F1:8B:AC:C3:E8:EE:D5:DF:6C:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d876787e-6400-3e37-8c22-d71e15d2557f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:c5:5d:1b:8a:5e:ce:87:b7:e0:a6:e8:7b:20:47:15:c2:a5: a5:01:a4:5a:35:65:56:4b:fa:c3:1f:90:f4:23:26:2f:ff:a1: 59:04:8b:19:c3:86:cd:94:99:cc:23:9e:7c:94:90:bf:9f:a8: e4:4a:31:59:1f:aa:69:20:95:60:4c:bc:08:43:0d:14:f8:ce: 0e:5f:8c:4e:00:4b:6a:5a:86:c8:b4:11:61:9f:3c:19:71:31: b2:e4:1e:0c:e8:1f:2c:ec:ee:fc:0b:95:b7:19:d5:a3:dd:1e: dd:cc:64:5f:6b:69:57:0b:4e:f5:9b:11:50:07:f0:86:b3:73: a2:a2:24:81:de:49:d7:43:e9:5c:ba:28:8d:fb:71:0a:3d:40: c7:d9:2c:df:d4:7e:32:7b:f2:23:d7:bd:76:45:69:46:5a:c4: 8c:ab:b1:80:3c:f1:c9:14:05:8e:6b:c0:af:3e:dd:2a:fb:59: 75:3a:52:1e:aa:b9:5e:83:f7:4d:55:a3:00:da:43:c2:eb:79: f9:ad:1f:04:5a:27:29:85:a4:18:09:56:e7:7f:30:ef:7e:46: e7:1e:c2:4d:15:ed:5f:de:d0:b8:09:ca:a1:3b:6d:2c:99:22: 95:dc:37:7b:63:ce:89:cf:17:b9:c4:74:07:a7:80:10:aa:cc: 41:fc:fb:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElvryBiHGNoYrQOMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQwNjEzMDEwMVoXDTI1MDcwNTEzMDEwMVowLzEtMCsGA1UEAxMk ODYxMjI0YmYtNTAxNi00MDgyLWI5NjctZDExNzZmYTBjN2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdeOe27vLKnAaYREQvJjLA5rQoExU66eR3GD kgydbbjNnAkq156FDGOFv7+2AkQBDBmbCjfxIIU1Ky5dOVhjJ4oLl/bScVTnscUF zmbf2OMmBbmVOi2w6iayrSBv9rYCzXPVyibGJ6hN+Bjxxbhl9gRrTfcB4oet2ULz bpwjkcQYFlMtk1fOzsPFGZB9L5mtEe5HnBj6g6Wi1gDD2pSM4ZRGAT6EDSn1M9PO x2GWC78srmF9SQ2Odg8No1kiebM5eTg+34sQX3pY+LvNg/nkAVi+gGzn+dEeZC5O FbbACxrO7skRnqwvD5NYP3z7uDgZiImNN5CqWOBgxRTOo1bg4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9PRkaflupxoJLxi6zD6O7V32yJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZDg3Njc4N2UtNjQwMC0z ZTM3LThjMjItZDcxZTE1ZDI1NTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDFXRuKXs6Ht+Cm6HsgRxXCpaUBpFo1ZVZL+sMfkPQjJi//oVkEixnD hs2UmcwjnnyUkL+fqORKMVkfqmkglWBMvAhDDRT4zg5fjE4AS2pahsi0EWGfPBlx MbLkHgzoHyzs7vwLlbcZ1aPdHt3MZF9raVcLTvWbEVAH8Iazc6KiJIHeSddD6Vy6 KI37cQo9QMfZLN/UfjJ78iPXvXZFaUZaxIyrsYA88ckUBY5rwK8+3Sr7WXU6Uh6q uV6D901VowDaQ8LrefmtHwRaJymFpBgJVud/MO9+Rucewk0V7V/e0LgJyqE7bSyZ IpXcN3tjzonPF7nEdAengBCqzEH8+3I= -----END CERTIFICATE-----Generated at Mon Apr 7 13:07:02 2025 by rpki-client